UbuntuUpdates.org

Package "tar"

Name: tar

Description:

GNU version of the tar archiving utility

Latest version: 1.26-4ubuntu1.2
Release: precise (12.04)
Level: updates
Repository: main

Links


Download "tar"


Other versions of "tar" in Precise

Repository Area Version
base main 1.26-4ubuntu1
security main 1.26-4ubuntu1.2

Changelog

Version: 1.26-4ubuntu1.2 2021-05-03 16:06:19 UTC

  tar (1.26-4ubuntu1.2) precise-security; urgency=medium

  * SECURITY UPDATE: Infinite read loop
    - debian/patches/CVE-2018-20482.patch: Add handling for short read
      condition in sparse_dump_region() of src/sparse.c.
    - CVE-2018-20482
  * SECURITY UPDATE: NULL pointer dereference
    - debian/patches/CVE-2019-9923.patch: Check for NULL return value from
      find_next_block in src/sparse.c.
    - CVE-2019-9923

 -- Avital Ostromich <email address hidden> Mon, 11 Jan 2021 20:45:20 -0500

Source diff to previous version
CVE-2018-20482 GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (inf
CVE-2019-9923 pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended header

Version: 1.26-4ubuntu1.1 2016-11-21 20:06:43 UTC

  tar (1.26-4ubuntu1.1) precise-security; urgency=medium

  * SECURITY UPDATE: extract pathname bypass
    - debian/patches/CVE-2016-6321.patch: skip members whose names contain
      ".." in src/extract.c.
    - CVE-2016-6321

 -- Marc Deslauriers <email address hidden> Thu, 17 Nov 2016 11:07:39 -0500

CVE-2016-6321 Bypassing the extract path name



About   -   Send Feedback to @ubuntu_updates